Lucene search
MitreCVELIST:CVE-2020-28071HistoryDec 23, 2020 - 5:54 p.m.
CVE-2020-28071
2020-12-2317:54:20
mitre
www.cve.org
0.001 Low
EPSS
Percentile
19.8%
SourceCodester Alumni Management System 1.0 is affected by cross-site Scripting (XSS) in /admin/gallery.php. After the admin authentication an attacker can upload an image in the gallery using a XSS payload in the description textarea called ‘about’ and reach a stored XSS.
Related
nvd
nvd
CVE-2020-28071
2020-12-23 18:15:12
cve
cve
CVE-2020-28071
2020-12-23 18:15:12
prion
prion
Cross site scripting
2020-12-23 18:15:00
packetstorm
packetstorm
Alumni Management System 1.0 Cross Site Scripting
2020-12-17 00:00:00